d2ggo8p8h1as73d4ikgg[.]bookingcom-restaurantsdubai[.]webflow[.]io

The domain d2ggo8p8h1as73d4ikgg.bookingcom-restaurantsdubai.webflow.io was registered on 12 June 2026 via the Webflow platform. DNS resolution points to the address 172.64.151.8, which is hosted on infrastructure commonly used for short‑lived malicious sites. The domain is currently listed as active and has been classified with an elevated risk rating for generic phishing.

PhishDestroy has already added the domain to its blocklist, and it also appears on one additional security blocklist. VirusTotal analysis shows that three of ninety‑one scanning engines flagged the domain, indicating some level of malicious behavior, though the majority of engines did not raise a detection. The limited detection count suggests that the payload or page content may be evasive or that the site is newly deployed.

No further public intelligence, such as Safe Browsing warnings, OTX mentions, or SSL certificate details, is available at this time. Defenders should block the domain at the DNS or proxy layer, monitor outbound connections to the associated IP address, and consider adding the domain to internal blocklists. Continuous re‑evaluation is advised, as additional detections may appear as the campaign matures.